A
avivgood
Guest
I have a winform app, that has a login option: the login data is just email and password. When the user logs in, I want that the program will "remember" the last user that logged in (if he didn't log out) and use this information for the next time he opens the app. I can just put it in a text file, but text files can be changed by anyone to everything else, so the user can access every single account in the DB, even if he is not authorized. if I add password to the text file (and then run checks if the password in the text file matches the password in the DB) then the password will be exposed to everyone that can access the computer (You may say "well, if he can access the computer he can log into the account anyway", but if he dont know the password he can't steal the account - just make changes) Encrypting the password in the text file won't work as well because the attacker has limitless tries to decrypt the password. What is best practice for such problems?
Continue reading...
Continue reading...